$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38.cer File: 1534b7d7-f616-427d-9bc3-85d1bd789f38.cer (raw, json) Hash identifier: uwxD3GfY5xY6Xb+LqGBeznjZjMaxHcfMXjjR8yPSl9o= Subject key identifier: 10:A0:D4:E6:05:D3:61:6F:A3:C8:32:72:85:02:09:5B:58:BE:E5:D2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584DC12E0246F1A77A97AAE57580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 12:45:17 +0000 Certificate not after: Wed 09 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 33141 AS: 36494 IP: 204.89.218.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:2e:02:46:f1:a7:7a:97:aa:e5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 7 12:45:17 2026 GMT Not After : Aug 9 12:45:17 2028 GMT Subject: CN=1534b7d7-f616-427d-9bc3-85d1bd789f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:71:4a:22:28:f6:ec:53:ac:1f:7e:bc:7a: c9:4a:dd:2a:61:11:94:d0:34:83:2b:15:20:cf:ce: a7:37:36:80:9f:9c:d1:00:3c:a4:3c:fb:fd:e5:17: 12:4b:bd:95:43:e7:a0:0c:96:3e:d1:b6:b1:be:a7: 43:17:b1:a6:54:ae:aa:a9:c9:e8:80:c4:d4:c7:01: e2:ac:a1:2d:a2:48:63:0c:15:a4:d8:8b:6d:72:8e: 50:56:b6:d4:ff:bb:9c:f5:0f:72:62:8b:bc:42:b6: 6a:90:fa:d3:dd:3d:00:23:b0:9a:b0:45:c6:ff:a9: 28:62:10:4c:a8:ec:e3:6c:dc:b7:4a:3b:97:7b:36: e1:1d:0b:cb:0e:c2:e9:3d:0a:08:f8:e4:7c:45:f1: 92:f0:e6:30:e2:4a:c2:43:72:e9:fa:a5:bb:80:59: 79:00:5e:10:10:5e:54:9a:b6:ab:0b:71:6c:72:45: f2:f3:44:54:60:7a:46:84:cd:55:fb:9e:3a:a9:ca: 2a:62:a4:ec:3e:b7:d6:eb:5d:d3:39:ae:02:af:cc: 24:04:cb:98:e5:e1:47:63:b5:4b:b2:42:0c:ce:72: 27:e7:01:91:0b:4a:3c:89:01:6a:86:3e:7f:80:75: 18:e1:f8:0c:db:38:3d:13:fe:b2:ca:16:88:83:3c: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:D4:E6:05:D3:61:6F:A3:C8:32:72:85:02:09:5B:58:BE:E5:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.89.218.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33141 36494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1f:58:fe:18:56:e1:3a:91:6c:8b:9b:c7:3e:78:71:f0:4d: 84:81:ac:77:ac:5b:f1:0d:e1:65:3f:ee:91:01:f2:c9:22:51: 97:a2:e6:72:29:8a:a3:bd:ca:b0:c0:a6:64:8f:1e:a1:b8:1d: f4:14:b6:41:90:3e:59:ac:8f:67:bc:25:ec:39:74:8f:b4:13: 9e:39:cc:6f:0b:8a:13:17:da:e0:3e:ed:6b:00:ea:c6:04:88: 41:15:f2:1c:b0:f7:1c:ca:69:6c:b7:84:17:2d:72:3b:d1:7e: ad:c5:a6:13:e8:7b:7c:4a:1d:0a:01:dd:dd:2e:21:cb:a3:d6: c1:3f:fe:d1:a3:32:84:cf:0e:02:f0:66:30:39:5d:d4:78:21: b7:6d:fe:df:d2:ff:79:f9:72:00:66:a0:80:76:a3:6b:80:4d: 3d:0a:c9:b1:67:8f:30:e0:72:c0:7c:91:64:b4:cd:45:b6:7f: 71:ac:a3:29:f5:cd:f6:a3:e7:2a:34:14:46:2a:ca:fb:22:d4: 1f:ed:aa:df:73:b7:4f:38:c9:c9:f0:83:c7:ca:64:3c:ed:b4: ab:fd:89:81:b4:37:ae:18:00:44:62:ac:04:1a:c2:59:07:cc: b0:0e:23:56:c8:6c:e2:c4:f8:d2:75:d8:d4:89:a3:25:99:98: 80:56:1e:bc -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE3BLgJG8ad6l6rldYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDUwNzEyNDUxN1oXDTI4MDgwOTEyNDUxN1owLzEtMCsGA1UEAxMk MTUzNGI3ZDctZjYxNi00MjdkLTliYzMtODVkMWJkNzg5ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EtxSiIo9uxTrB9+vHrJSt0qYRGU0DSDKxUg z86nNzaAn5zRADykPPv95RcSS72VQ+egDJY+0baxvqdDF7GmVK6qqcnogMTUxwHi rKEtokhjDBWk2Ittco5QVrbU/7uc9Q9yYou8QrZqkPrT3T0AI7CasEXG/6koYhBM qOzjbNy3SjuXezbhHQvLDsLpPQoI+OR8RfGS8OYw4krCQ3Lp+qW7gFl5AF4QEF5U mrarC3FsckXy80RUYHpGhM1V+546qcoqYqTsPrfW613TOa4Cr8wkBMuY5eFHY7VL skIMznIn5wGRC0o8iQFqhj5/gHUY4fgM2zg9E/6yyhaIgzzDFQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBCg1OYF02Fvo8gycoUCCVtYvuXSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x NTM0YjdkNy1mNjE2LTQyN2QtOWJjMy04NWQxYmQ3ODlmMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzE1MzRiN2Q3LWY2MTYtNDI3ZC05 YmMzLTg1ZDFiZDc4OWYzOC8xNTM0YjdkNy1mNjE2LTQyN2QtOWJjMy04NWQxYmQ3 ODlmMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMWdowHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID AIF1AgMAjo4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAQh9Y/hhW4TqRbIubxz54cfBNhIGsd6xb8Q3hZT/u kQHyySJRl6LmcimKo73KsMCmZI8eobgd9BS2QZA+WayPZ7wl7Dl0j7QTnjnMbwuK Exfa4D7tawDqxgSIQRXyHLD3HMppbLeEFy1yO9F+rcWmE+h7fEodCgHd3S4hy6PW wT/+0aMyhM8OAvBmMDld1Hght23+39L/eflyAGaggHaja4BNPQrJsWePMOBywHyR ZLTNRbZ/cayjKfXN9qPnKjQURirK+yLUH+2q33O3TzjJyfCDx8pkPO20q/2JgbQ3 rhgARGKsBBrCWQfMsA4jVshs4sT40nXY1ImjJZmYgFYevA== -----END CERTIFICATE-----Generated at Wed May 13 08:07:53 2026 by rpki-client